CLAIMS 

1 1 . Method fqr verifying a transformer of a so-called source code into a 

2 so-called transformed code designed for an embedded system, said source and 

3 transformed codes being ass^pciated with virtual machines, characterized in that it 

4 comprises at least the following steps: 

5 - determining, for each\of said source (1) and transformed (3) codes, a first 

6 common subset (13), constituting a single virtual machine that factors in the behavior 

7 of these two codes (1,3); \ 

8 - determining, for each of said source (1) and transformed (3) codes, a second 

9 subset (10, 30) constituted by a plurality of so-called auxiliary functions (10/ - 30,) 

10 used by said single virtual machine, \md auxiliary functions (10/ - 30/) representing 

1 1 residual differences between said source (1) and transformed (3) codes; 

12 - associating said auxiliary functions in pairs, a first auxiliary function (10/) of 

13 each pair belonging to- said second subsety(10) associated with said source code (1) 

14 and a second auxiliary function (30/) of each pair belonging to said second subset (30) 

15 associated with said transformed code (3); \ 

16 - verifying (6) a given correspondence property between said auxiliary 

17 functions (10/ - 30/) of all of said pairs; and jMC 

18 - verifying that said transformation of the source code (1) into a transformed 

19 code (3) by said converter (2) satisfies said givenVorrespondence property. 

1 2. Method according to claim 1, characterized in that said correspondence 

2 property is a logical relation, so that said auxiliary functions of each of said pairs (10/ 

3 - 30/), when executed, generate results linked by said logical relation, and in that this 

4 relation is the identity relation for so-called observable entities of each of said source 

5 and transformed codes, for any pair of auxiliary functionsi so that the functionalities 

6 of said source code (1) are retained when said transformation into said transformed 

7 code (3), and said verification of the code transformer (2), ace performed. 

1 3. Application of the verification method according to either of claims 1 

2 and 2 to a code transformer (2) that generates, from said source code (1), a 

3 transformed code (3) designed to be stored in memory means (7l\ of a chip card (7). 
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4. Application accordin^to claim 3, characterized in that, said 
transformed code being a program written in the virtual machine of a given computer 
language, said chip card (7) is a chip card that stores a plurality of software 
applications (A| through An) written in mis transformed code (3). 

5. Application according to clsnm 3 or 4, characterized in that said source 
code (1) is a program written in the "JAVAa (registered trademark) virtual machine 
and said transformed code (3) is a program written in the "JAVA CARD" (registered 
trademark) virtual machine. \ 
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